205
"We found a vulnerability..."
(lemmy.sdf.org)
F-Droid is an installable catalogue of FOSS (Free and Open Source Software) applications for the Android platform. The client makes it easy to browse, install, and keep track of updates on your device.
Matrix space | forum | IRC
Uninstalling my primary browser isn't really a practical solution, what am I supposed to use, Chrome? How about fixing the version they're shipping? Or should I be looking somewhere other than F-Droid for Android Firefox?
I changed to the Divest-repo for Mull, and they have an updated version that has fixed these security issues.
ETA: Different signing keys though, so you can't just update it, but have to reinstall.
How do you do that?
You add https://divestos.org/apks/official/fdroid/repo/ as a repo in F-Droid settings. After that you can choose which repo to prefer for Mull.
Thank you
Theyre the distributor, the dont fix apps and its not their job to do so. Getting the same app from a different source wont change anything
huh? no one's asking them to fix firefox, we're asking that they just ship the latest version.
the warning states that several vulnerabilities have been fixed since firefox version 130, f-droid's latest version of the package is 129: that very much makes it sound like the problem is wholly caused by f-droid not making version 130 available.
To ship it they have to work out how to build that version themselves from source though - that's their whole thing. It's not like a normal app store where they take pre-built binaries from the developer.
Well ok if thats the case you are completely right, as long as there isnt some kind of issue and others have already updated the package pushing security fixes asap is indeod important
Iceraven is a Mozilla based standin.
Can install FFUpdater here:
https://f-droid.org/packages/de.marmaro.krt.ffupdater/
and then select it from there.
I just install Firefox from the Play Store. ๐คทโโ๏ธ Is that bad?
Yes
Why?
Goggle bad :^)
But Firefox good..? Serious replies only please, I really am curious.
I think it's just that normal Firefox has more propietary stuff and more tracking by default
Ah okay, so in a way it's more about Firefox than about Google. ๐